Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/68f1f328-bc80-3bd2-89c9-7effd0549089.roa
File:                     68f1f328-bc80-3bd2-89c9-7effd0549089.roa (raw, json)
Hash identifier:          m6zdRS7KHJwCQ3WOXZABiaTj++grcNqX34gsWHxKu90=
Subject key identifier:   46:4C:A9:5C:91:95:A1:E7:B1:8F:6E:4B:F9:00:7F:2D:C8:85:64:A8
Certificate issuer:       /CN=346c6ea1-4f1c-4579-b4b1-78891a34647a
Certificate serial:       010D0C9F432858487E50636F284759991A8163A0
Authority key identifier: 72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/68f1f328-bc80-3bd2-89c9-7effd0549089.roa
Signing time:             Fri 10 Jan 2025 02:00:40 +0000
ROA not before:           Fri 10 Jan 2025 02:00:40 +0000
ROA not after:            Thu 10 Apr 2025 01:00:40 +0000
asID:                     396026
IP address blocks:        162.216.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7e:50:63:6f:28:47:59:99:1a:81:63:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=346c6ea1-4f1c-4579-b4b1-78891a34647a
        Validity
            Not Before: Jan 10 02:00:40 2025 GMT
            Not After : Apr 10 01:00:40 2025 GMT
        Subject: CN=186d718b-b7f7-4814-9ee0-25408ca3abcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:2e:b4:8c:b6:5e:07:d9:b3:2d:c3:11:aa:7f:
                    66:54:3b:91:21:ca:9e:a8:df:3c:2b:df:00:65:ad:
                    57:88:f5:30:ee:ad:cf:91:e8:f0:40:c3:3d:bd:bb:
                    e7:2f:84:80:7a:93:23:13:e4:f7:79:70:05:01:18:
                    97:8f:64:75:20:4b:b4:d2:af:c7:ba:40:c1:a0:7e:
                    da:aa:6d:31:75:55:f4:30:0e:e6:2f:4e:9c:f1:88:
                    d3:28:45:1b:24:91:81:43:35:c8:77:fb:e9:86:86:
                    04:d1:be:ee:8b:16:29:d5:25:84:d9:29:9d:ca:2a:
                    44:0d:b5:35:e8:1f:ff:a7:09:45:64:dd:5e:ab:e8:
                    67:ae:7c:57:25:c7:55:93:02:16:0c:c9:bf:2b:45:
                    d5:75:7b:51:cd:ba:fc:26:66:35:2c:81:2f:65:a5:
                    94:e7:f9:8b:60:5c:f8:5b:6c:a8:36:bd:96:8c:3e:
                    e6:46:87:07:c7:07:9a:f0:82:e8:b6:cf:7a:fa:fd:
                    ef:ec:6c:b0:f4:92:7b:8c:af:37:6d:3e:4b:e5:f8:
                    a4:eb:8a:3f:7d:e0:e6:38:49:c0:3c:7e:a8:e8:99:
                    67:7e:d7:1f:c7:63:9d:39:40:aa:9e:d0:a4:4e:1a:
                    ed:6c:bc:84:74:20:c2:a8:d3:2e:dd:b5:58:b9:4f:
                    52:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:4C:A9:5C:91:95:A1:E7:B1:8F:6E:4B:F9:00:7F:2D:C8:85:64:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/68f1f328-bc80-3bd2-89c9-7effd0549089.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.crl

            X509v3 Authority Key Identifier:
                keyid:72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.216.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:a6:63:5c:8e:4c:e9:fe:2b:37:ac:cb:56:76:f9:c2:9f:e1:
         d3:6d:c1:ab:f0:09:dd:c9:98:10:5f:7c:ab:61:a8:2b:37:81:
         65:ce:94:42:01:f5:46:cf:0d:28:6f:47:cb:0e:c7:75:5e:fd:
         84:3b:01:bc:bb:2c:41:e3:af:70:7c:e8:6e:a9:91:e4:4f:0b:
         15:60:be:aa:28:d5:3e:53:44:88:cf:ce:b1:2e:1b:00:5d:b3:
         76:e5:9e:ea:a2:8c:ca:28:88:ef:4e:86:75:1e:b2:da:3c:9c:
         d4:9e:91:19:57:f2:24:54:c9:ef:b0:5d:96:37:c0:44:9b:97:
         0d:16:df:26:ec:ef:af:87:28:d2:5a:ea:da:f8:24:3d:91:58:
         2d:bf:a1:78:56:d2:71:c8:ef:29:b1:66:68:92:ab:dd:65:30:
         97:82:1f:ef:80:05:3f:95:3d:2f:b5:c7:b8:c6:36:d9:41:9d:
         eb:12:87:d4:33:12:64:6e:04:78:8e:71:a8:ad:54:83:4d:c0:
         b2:cd:20:6c:3e:0f:b8:5f:84:32:c3:71:6b:95:00:a1:a1:1d:
         8e:63:67:c6:c5:97:d6:71:76:1d:02:08:36:11:8c:3f:6a:d3:
         f6:ea:49:68:e5:94:b8:78:41:9c:31:0b:11:9e:5d:56:51:d1:
         15:56:5f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:40:45 2025 by rpki-client